Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft
File: miZlfmslRJQlt0hkXnQgx2rCs6Q.mft (raw, json)
Hash identifier: PzCBGiYdO+J7ysAVnk+C41JqEcrHmr41dLQEMboxanY=
Subject key identifier: 5C:A6:63:81:3F:48:63:09:3D:9E:A7:A5:9F:51:D6:BC:D9:8F:85:5E
Authority key identifier: 9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
Certificate issuer: /CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Certificate serial: 0194BC72D0A38973D64DFE2B252B43CDA297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft
Manifest number: 0C21
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: 2V_JK6rjk2y5OzV-jGzfsnfR4RM.roa (hash: 01s7oF2QbdI5IMZDB8rKIwaE1speupoZ2KjAlI2OqvU=)
2: cbtDU2QhUAaEdfn79ud9d1retQE.roa (hash: zIapCEP1U16iRYVZKfI5rkQeutzKrMtnN/VL2r5jtgA=)
3: miZlfmslRJQlt0hkXnQgx2rCs6Q.crl (hash: RjgntwCORZ2hkBLaQ/AjxjupVADKrpCDZO3DbNlbQm4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d0:a3:89:73:d6:4d:fe:2b:25:2b:43:cd:a2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=5ca663813f4863093d9ea7a59f51d6bcd98f855e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:27:a0:9d:3f:1f:19:67:e0:11:3e:34:9d:3c:
18:85:ca:21:10:31:02:5f:4b:d0:36:a6:97:98:46:
6f:0e:10:ea:1a:fb:4f:bc:a2:a1:e8:b0:a0:a5:9e:
42:e0:b0:eb:e1:89:5c:df:2e:0b:00:c3:22:72:83:
79:ee:a8:75:1d:fb:26:14:d7:df:dd:f0:3a:2d:68:
00:12:c1:18:e3:1d:e7:d5:82:db:e4:8e:05:df:5d:
c0:a9:4b:d9:0c:a0:11:45:a4:65:81:9f:50:ba:35:
16:d6:0f:72:8b:7d:d2:be:4c:a1:6c:4c:f2:77:4f:
ba:2e:9f:1e:71:22:45:9d:07:4d:7a:22:79:ce:42:
79:61:22:d0:c5:05:f8:c3:64:9f:55:cb:52:a1:0c:
d5:f9:69:90:2b:8a:56:00:98:55:6a:8a:1e:3b:b2:
69:75:e4:91:31:23:69:97:e8:e9:d9:69:dc:58:43:
60:16:60:e8:47:8f:e8:ed:6b:36:38:24:32:90:e0:
98:78:3f:73:f1:b4:59:95:37:c9:1a:78:ab:52:a1:
ef:d7:4c:2d:e7:c0:9a:be:69:1c:8f:b1:e1:3b:c8:
ad:0a:a5:36:50:b3:f7:45:32:b2:7a:43:e0:f4:0d:
35:62:36:29:8a:e3:55:1c:9b:6b:73:7b:48:7d:38:
6a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A6:63:81:3F:48:63:09:3D:9E:A7:A5:9F:51:D6:BC:D9:8F:85:5E
X509v3 Authority Key Identifier:
keyid:9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:86:1e:d7:aa:83:19:7f:5b:7e:b8:13:40:0f:56:0d:fc:01:
b8:36:75:e1:f4:b9:f9:0e:d1:e5:b6:c4:cd:77:cf:d0:27:d4:
2e:50:af:05:97:66:c3:03:f3:e9:22:f3:06:59:54:26:59:93:
9b:e4:65:d6:b2:18:83:61:ca:55:be:62:29:0d:f0:b9:76:92:
e8:6f:fd:37:cb:0c:96:a1:f7:39:09:7b:d3:c2:89:17:72:b5:
20:f6:ba:07:b6:cd:9c:a5:2e:a7:ce:07:c0:21:ca:76:a2:39:
b7:92:d0:71:d7:39:79:d0:b8:90:0f:44:76:fd:79:59:ce:8f:
ed:f8:e7:9f:dd:8f:94:d3:62:b2:80:e0:62:db:64:06:3a:5c:
99:fd:91:de:14:c1:4e:f6:7e:e1:0c:e3:ed:d4:ed:e3:38:10:
d6:a7:22:89:27:33:ac:de:82:c4:9b:e0:c8:22:b7:24:db:fe:
b4:b6:13:a9:1f:39:bb:ab:e8:9f:4a:12:54:94:c7:45:50:00:
3b:a6:f0:04:f0:d6:77:86:03:02:39:b4:b2:d0:a5:59:6f:d4:
7d:65:3b:71:77:89:ef:f1:87:a4:30:5e:77:bc:d8:d0:f8:26:
f3:68:b5:5e:54:e3:4f:fe:77:fe:89:1f:95:ba:68:3b:a8:05:
37:fe:ca:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:06 2025 by rpki-client